Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YdO8NTIHL-DmcQRxo-yE0U9g7Qw.roa
File: YdO8NTIHL-DmcQRxo-yE0U9g7Qw.roa (raw, json)
Hash identifier: jJYAwB9puIw08kSPhGOPF74/AsexxVNItcaMrye5bew=
Subject key identifier: 61:D3:BC:35:32:07:2F:E0:E6:71:04:71:A3:EC:84:D1:4F:60:ED:0C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01995D9B2D218F9114875E713383CAB4E7A0
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YdO8NTIHL-DmcQRxo-yE0U9g7Qw.roa
Signing time: Thu 18 Sep 2025 16:14:34 +0000
ROA not before: Thu 18 Sep 2025 16:14:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
89.106.202.0/24 maxlen: 24
185.11.63.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:9b:2d:21:8f:91:14:87:5e:71:33:83:ca:b4:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 18 16:14:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61d3bc3532072fe0e6710471a3ec84d14f60ed0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:ea:a7:fd:c0:c2:b0:27:50:3f:2c:04:c4:
dc:12:df:91:7f:39:48:ff:a2:a6:3c:5e:a2:41:62:
a0:56:86:c7:5f:b3:4f:bb:da:cf:be:24:75:30:3b:
e4:1c:75:7a:f8:06:cd:ae:bc:18:e5:7a:4d:7f:f2:
64:8e:78:2f:1a:5b:4f:a6:31:10:95:b5:4c:70:9b:
c1:59:16:de:3f:37:09:30:65:ab:06:3b:2a:28:4d:
2e:39:aa:fc:68:3b:02:9c:cc:8e:6d:02:e5:93:7d:
a4:2b:d3:61:12:49:9a:5c:b3:41:bc:d5:3c:46:d4:
aa:e0:87:af:3e:10:e6:d7:92:ea:12:59:46:7e:4c:
50:0f:f3:0c:c9:9e:13:88:8d:4d:e9:a8:33:a0:77:
b0:c0:16:6f:52:47:49:97:9c:e7:d5:6f:b4:43:64:
69:b5:0e:a1:bb:47:f3:3c:6d:97:6b:8a:cc:8b:54:
03:c9:4b:ee:25:6a:9a:e0:ad:7b:ef:ee:74:71:ab:
1e:78:a8:a8:02:53:5b:76:80:99:cd:49:a8:a6:0c:
ed:b6:3a:ac:cb:17:94:85:bb:84:8c:af:9a:d3:97:
a3:23:df:68:82:71:c3:f3:8d:e2:26:84:ec:3b:54:
89:c2:88:a0:da:ef:21:d5:26:74:b5:16:5f:44:5f:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:BC:35:32:07:2F:E0:E6:71:04:71:A3:EC:84:D1:4F:60:ED:0C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YdO8NTIHL-DmcQRxo-yE0U9g7Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
62.233.44.0/24
89.106.202.0/24
185.11.63.0/24
193.109.213.0/24
Signature Algorithm: sha256WithRSAEncryption
56:78:52:57:8a:46:bc:88:c5:8c:3b:de:84:de:9d:5b:dc:3f:
12:a0:f0:58:e6:a9:86:63:78:83:72:ba:59:3e:c2:f1:14:de:
9d:16:16:81:7a:bf:ff:ae:2b:73:e9:5a:d4:c3:3d:75:81:bd:
93:6b:2b:33:b5:06:8f:7b:cb:91:38:41:2b:d2:ea:4e:99:f1:
41:8c:06:86:95:df:12:38:54:61:bb:95:f5:99:dc:0f:c1:6a:
f8:c3:0b:90:93:46:b9:99:29:96:cc:da:0f:e2:b9:9a:80:f9:
83:23:18:73:d1:2d:89:45:cd:77:9d:76:3e:10:75:75:17:48:
55:81:2b:98:6d:09:43:16:b0:00:e3:4e:fb:75:d7:47:71:70:
20:4c:97:29:93:0e:dc:2a:25:19:41:2c:48:56:a6:92:d1:fb:
75:f4:b5:3d:be:70:e9:83:21:e0:ca:a5:73:e3:51:9b:37:d7:
0f:f7:bb:aa:8b:37:eb:0b:43:30:9a:d0:37:4e:3f:ad:3c:45:
77:7d:19:e2:36:88:f9:58:81:3e:45:02:49:9f:52:79:36:f3:
93:e3:04:f9:4c:f4:b0:bc:a9:b1:58:75:16:a3:df:19:c1:b5:
dc:0f:55:3b:dd:18:9f:c7:42:78:63:6b:b9:af:e1:f6:d5:02:
88:42:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:45:45 2025 by rpki-client